Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Adobe FrameMaker ausnutzen, um seine Privilegien zu erhöhen.
Product
FrameMaker ist ein Autorenwerkzeug zur Verwaltung und printorientierten Präsentation von technischen Dokumenten.
Vulnerabilities 2
-
Critical 10.0
Tenable Vulnerability Disclosure | API Auth Bypass
Adobe Framemaker Publishing Server versions 2020.3, 2022.2 and earlier are affected by an Improper Authentication vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain unauthorized access or elevated pri…
-
Critical 9.8
Tenable Vulnerability Disclosure | Sensitive Information Disclosure Via Fake FMPS Worker
Adobe Framemaker Publishing Server versions 2020.3, 2022.2 and earlier are affected by an Information Exposure vulnerability (CWE-200) that could lead to privilege escalation. An attacker could exploit this vulnerability to gain access to sensitive informatio…
Revision history
-
#1
Initiale Fassung
References
-
Adobe Security Update vom 2024-06-11
https://helpx.adobe.com/security/products/framemaker-publishing-server/apsb24-38.html